Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File:                     rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier:          4lSCPesL60/nZaty2O9CKOmZtuN+P/SRKaRyj+NNr10=
Subject key identifier:   7B:A5:40:B2:0E:D1:72:D7:99:3C:76:E2:81:0F:73:9E:58:D1:24:61
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer:       /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number:          3C
Signing time:             Mon 11 May 2026 08:45:33 +0000
Manifest this update:     Mon 11 May 2026 08:45:33 +0000
Manifest next update:     Mon 18 May 2026 08:45:33 +0000
Files and hashes:         1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: wILrt3qqnKWk6ZF+NylmG0r31do5zME+6n2StMaUtaA=)
                          2: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
                          3: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
                          4: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
                          rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
        Validity
            Not Before: May 11 08:45:33 2026 GMT
            Not After : May 18 08:45:33 2026 GMT
        Subject: CN=6a01972d-4dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:32:e0:75:1e:65:1c:44:7c:4a:9b:98:68:35:
                    2c:e2:ef:49:d3:2c:4f:e0:f7:7b:eb:3b:54:1a:06:
                    b8:f3:dd:5c:90:dd:c8:6f:41:5f:8c:9d:1a:ee:6b:
                    dc:01:7a:fb:7c:73:11:26:e7:65:bd:3c:9d:c1:60:
                    9b:41:7c:2d:fa:32:97:03:05:9e:0c:19:bf:72:64:
                    d8:8b:b3:26:87:f6:7b:30:72:76:66:3b:d7:bf:a4:
                    f2:53:5c:e4:ef:e7:53:e8:6c:5b:59:d8:99:14:a5:
                    8d:65:76:ef:bc:46:e4:08:e0:a1:6a:be:4e:0a:fa:
                    a5:0e:12:1a:be:6a:19:b9:35:2f:ad:1d:e5:7d:5f:
                    79:32:b4:20:04:a8:0b:26:21:d1:92:d4:ce:04:3b:
                    88:4c:e5:8b:0d:45:c0:76:ac:15:f5:e4:1e:8b:07:
                    90:75:df:8c:3c:d5:0e:9e:d1:bf:f5:89:49:69:86:
                    a6:eb:78:92:b6:f9:33:98:0c:95:7d:5f:84:37:f6:
                    98:55:71:10:a2:8f:ab:a3:49:8d:25:83:5f:28:71:
                    53:ee:ef:54:a9:0c:b0:b3:8a:d8:05:50:eb:c4:e6:
                    22:47:74:c5:7f:82:a0:f4:67:5f:d0:58:85:b6:28:
                    f1:dd:e1:8c:15:85:ba:00:7e:55:14:70:ae:8e:35:
                    c9:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A5:40:B2:0E:D1:72:D7:99:3C:76:E2:81:0F:73:9E:58:D1:24:61
            X509v3 Authority Key Identifier:
                keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d9:81:65:1d:af:71:6e:8d:e0:77:0c:3d:d6:88:b9:c4:6b:
         c9:20:a2:73:a2:80:65:11:31:d7:45:45:c3:4b:10:ff:1c:81:
         78:e5:8d:06:20:57:73:cb:22:fb:db:32:83:f8:dd:d9:18:c7:
         7c:e6:bf:91:0d:6e:3c:e0:f4:21:a7:8a:a0:ad:88:91:14:9f:
         eb:28:24:b8:bb:55:5e:67:a7:01:6d:1c:a9:cf:e5:c6:56:73:
         60:e7:71:c7:87:3b:71:48:02:b0:38:f2:b3:d9:2d:2a:fb:29:
         ce:dd:43:f5:24:92:3e:06:52:6e:56:ba:1b:40:d2:7c:8f:f4:
         2e:d6:0f:ba:d2:b3:01:d8:6e:bc:2f:89:ca:c6:68:5e:51:2f:
         62:0f:ab:b8:01:7c:67:da:17:f7:d4:2a:5f:e9:d7:54:a4:04:
         49:c1:99:a3:d4:b2:06:ff:f3:da:f6:cb:8d:5a:a0:95:f2:17:
         97:c4:f2:c4:5e:3a:78:7d:bb:9a:fb:84:15:55:87:fb:3f:76:
         9e:c6:f9:39:63:2a:e0:d0:4b:76:5e:d6:10:d4:c8:e5:8b:06:
         d0:78:ab:b2:6d:3e:4d:26:99:11:e6:4a:b2:d8:98:80:e8:d3:
         14:45:f2:97:6c:4a:05:57:ab:17:59:7e:48:dc:0e:af:7b:fd:
         7a:1c:60:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:20 2026 by rpki-client